Re: Nat & Port forwarding
"Oliver Schulze L." <[email protected]> Thu, 22 Apr 2004 00:08:03 -0400
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Message-ID | <[email protected]> |
Hi Tommi, thanks for the help. I was thinking that dynip was need only in the server that has a dinamic public IP address. Will keep with the testing. Oliver Tommi Kyntola wrote: > [email protected] wrote: > >> >> Hi, >> I'm trying to use cipe between 2 Linux servers, one with static >> public IP address(server1), and another that connects to the >> Internet via NAT with dinamic public address(server2). >> >> I wanted to know if I should enabled port-forwading in my NAT >> router to my cipe server2 that has a private address. > > > Port-forwarding is not necessary, with dynip turned on from > the server side cipe config you can just aswell masquerade > the ports as usual. Other (but not as flexible and redundantly > complex) solution is to do port forwarding without the dynip > and the set the peer to match the port forwarded machine, but > I certainly don't recommend this, because it's far more easier > with dynip turned on. After that it doesn't matter > where your machines connect to the server. > >> I have setup my server1 to listen only, that is, its peer address >> is 127.0.0.1:9 > > > Well, with dynip turne on it doesn't matter what you have there. > 0.0.0.0 will do just fine, too. > >> As far as I understand, server2 will connect to server1 and >> then, server2 will run the ping command in order to server1 >> to optain the IP address of server2. > > > you should set > dynip 1 > in you server1 config and set the server2 to > ping 60 > (or whatever suits you. > >> Is this correct? > > > Yes, but you musn't forget the dynip setting from the > public static server. > >> Many thanks >> Oliver >> >> -- >> Oliver Schulze L. >> <[email protected]> >> >> >> -- >> Message sent by the [email protected] mailing list. >> Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body >> Other commands available with "help" in body to the same address. >> CIPE info and list archive: >> <URL:http://sites.inka.de/~bigred/devel/cipe.html> >> > > > -- > Message sent by the [email protected] mailing list. > Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body > Other commands available with "help" in body to the same address. > CIPE info and list archive: > <URL:http://sites.inka.de/~bigred/devel/cipe.html> -- Oliver Schulze L. <[email protected]> -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>